Bug 2521341 (CVE-2026-68768) - CVE-2026-68768 hashcat: hashcat: Heap Buffer Overflow leading to Denial of Service via oversized username
Summary: CVE-2026-68768 hashcat: hashcat: Heap Buffer Overflow leading to Denial of Se...
Keywords:
Status: NEW
Alias: CVE-2026-68768
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2521895
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-08-22 14:32 UTC by OSIDB Bzimport
Modified: 2026-08-24 13:24 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-08-22 14:32:14 UTC
hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c. When assembling output into a fixed-size buffer (HCBUFSIZ_LARGE, ~16 MB), the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that the accumulated length stays within the buffer capacity. When run with --username --show against a crafted hash file containing an oversized username that nearly fills the buffer, the total assembled output exceeds the buffer, causing a heap buffer overflow that can corrupt memory and crash the process.


Note You need to log in before you can comment on or make changes to this bug.